Cloud Access Management
- Product Introduction
- Getting Started
- User Guide
- Users
- Sub-Users
- Sub-User Security Credentials
- Collaborators
- Collaborator Security Credentials
- Message Recipients
- User Settings
- User Groups
- Role
- Identity Provider
- User-Based SSO
- Role-Based SSO
- Policies
- Definition
- Authorization Guide
- Syntax Logic
- Element Reference
- CAM-Enabled Role
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Compute
- Edge Computing
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- Database SaaS Tool
- CDN and Acceleration
- Network Security
- Endpoint Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- Practical Tutorial
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- CVM
- VPC
- API Documentation
- User APIs
- Role APIs
- Making API Requests
- Identity Provider APIs
- Policy APIs
Data Lake Compute
Last updated: 2025-03-26 10:08:10
Service roles and service-linked roles are predefined by Tencent Cloud services and, upon user authorization, the corresponding services can access and use resources by assuming these service-linked roles. This document provides detailed information on the use cases and associated authorization policies of these specific service-linked roles.
| Product | Role Name | Role Types | Role Entity |
|---|---|---|---|
| Data Lake Compute | DLC_QCSLinkedRoleInCheckDLCResource | Service-Related Roles | checkdlcresource.dlc.cloud.tencent.com |
DLC_QCSLinkedRoleInCheckDLCResource
Use Cases： The current role is the DLC service role, which will access your other service resources within the scope of the permissions of the associated policy.
Authorization Polices
- Policy Name： QcloudAccessForDLCLinkedRoleInCheckDLCResource
- Policy Information：
{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cos:GetService",
"cos:GetBucket",
"cos:ListMultipartUploads",
"cos:GetObject*",
"cos:HeadObject",
"cos:GetBucketObjectVersions",
"cos:OptionsObject",
"cos:ListParts",
"cos:DeleteObject",
"cos:PostObject",
"cos:PostObjectRestore",
"cos:PutObject*",
"cos:InitiateMultipartUpload",
"cos:UploadPart",
"cos:UploadPartCopy",
"cos:CompleteMultipartUpload",
"cos:AbortMultipartUpload",
"cos:DeleteMultipleObjects",
"cos:AppendObject",
"cos:HeadBucket",
"vpc:DescribeRouteTable",
"vpc:CreateRoute",
"vpc:AcceptVpcPeeringConnection",
"vpc:CreateVpcPeeringConnectionEx",
"vpc:CreateVpcPeeringConnection",
"vpc:DeleteVpcPeeringConnection",
"vpc:DeleteVpcPeeringConnectionEx",
"vpc:AcceptVpcPeeringConnectionEx",
"vpc:DescribeVpcPeeringConnections",
"cloudaudit:DescribeEvents",
"cos:GetBucket*",
"cos:PutBucket*",
"cos:DeleteBucket*",
"cos:RenameObject",
"monitor:GetMonitorData",
"chdfs:DescribeMountPoint",
"chdfs:DescribeFileSystem",
"chdfs:DescribeAccessGroups",
"chdfs:DescribeAccessRules",
"chdfs:ModifyFileSystem",
"chdfs:ModifyAccessRules",
"chdfs:CreateAccessGroup",
"chdfs:CreateAccessRules",
"chdfs:AssociateAccessGroups",
"chdfs:DisassociateAccessGroups",
"chdfs:DeleteAccessGroup",
"chdfs:DeleteAccessRules",
"vpc:DescribeAssistantCidr",
"vpc:DescribeVpcEx",
"chdfs:DescribeMountPoints",
"oceanus:DescribeWorkSpaces",
"oceanus:DescribeClusters",
"oceanus:DescribeCHDFSAccessGroups",
"oceanus:CreateCHDFSAccessGroup",
"vpc:DescribeVpcEndPoint",
"vpc:CreateVpcEndPoint",
"vpc:DeleteVpcEndPoint",
"tcr:CreateServiceAccount",
"tcr:DeleteServiceAccount",
"tcr:DescribeServiceAccounts",
"tcr:CreateMultipleSecurityPolicy",
"tcr:DescribeSecurityPolicies",
"tcr:DescribeRepositories",
"tcr:DescribeExternalEndpointStatus",
"tcr:ManageExternalEndpoint",
"tccatalog:DescribeTccCatalog",
"tccatalog:DescribeTccCatalogs",
"tccatalog:BindTccVpcEndPointServiceWhiteList",
"tccatalog:AcceptTccVpcEndPointConnect",
"tccatalog:DescribeTccVipInternal"
],
"resource": "*"
}
]
}
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No